Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/fcEpjbgKYOO71SWou3_dCE-kLKk.roa
File: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (raw, json)
Hash identifier: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=
Subject key identifier: 7D:C1:29:8D:B8:0A:60:E3:BB:D5:25:A8:BB:7F:DD:08:4F:A4:2C:A9
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 019427B5FE4E69AB0266387F18D57152A707
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/fcEpjbgKYOO71SWou3_dCE-kLKk.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56540
IP address blocks: 85.237.192.0/23 maxlen: 24
188.244.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fe:4e:69:ab:02:66:38:7f:18:d5:71:52:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc1298db80a60e3bbd525a8bb7fdd084fa42ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:ac:a4:3f:4c:14:0f:5c:84:bf:36:22:a9:
ee:3e:7b:2e:9d:84:de:6b:31:26:de:51:99:f6:41:
b9:79:8c:77:88:b5:58:38:55:a2:44:79:fd:19:ba:
e4:6b:0b:22:67:61:e9:a6:ef:5f:df:21:dd:3a:b2:
f6:ac:0a:1e:72:59:41:b6:a9:06:6e:8b:0d:e5:b5:
9c:45:16:47:ef:d5:9a:5b:32:50:fb:4a:ed:ee:7a:
11:42:b9:54:93:66:2e:8c:55:e7:aa:b3:1f:91:d6:
c3:b1:82:c8:79:0c:45:66:94:e0:0b:6d:a7:c9:d9:
fd:d8:fa:b9:f5:c8:da:76:e0:10:6e:83:66:ca:09:
97:f2:a6:09:d3:0b:2d:ea:ea:61:21:a5:14:6f:44:
c4:6b:10:c0:da:9e:0a:8d:b3:c6:31:4a:fa:c3:55:
95:cc:d0:c8:39:da:41:3a:67:eb:f6:d0:63:34:c2:
33:79:6e:e8:4b:d7:75:03:dc:4f:94:f5:23:54:4a:
f7:f5:f5:24:ae:d9:57:41:94:fd:c4:71:7d:11:8f:
3e:d7:45:1b:10:32:52:94:c7:2d:60:11:18:11:0d:
c9:19:09:f4:8f:53:12:0a:d8:6d:02:e7:3b:c6:8a:
11:67:cc:8a:f2:16:60:39:a0:91:ca:52:41:96:5e:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:29:8D:B8:0A:60:E3:BB:D5:25:A8:BB:7F:DD:08:4F:A4:2C:A9
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/fcEpjbgKYOO71SWou3_dCE-kLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.192.0/23
188.244.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2d:af:20:fa:66:dc:e6:34:50:f1:5a:f2:87:20:6b:c0:b4:
a0:3a:f5:1a:44:2f:ec:d3:88:c9:12:39:c3:f6:3b:06:c6:a6:
b9:4c:a1:c7:79:73:61:b8:80:3b:1c:d9:94:4d:ba:c8:08:ed:
7f:cc:bb:19:45:ce:a7:93:e7:2f:ff:69:ad:c7:de:0b:91:47:
28:8b:a6:aa:8f:56:5c:0c:ff:5e:4e:2d:ea:cf:17:23:e3:dc:
99:bb:de:28:73:73:ae:c3:34:18:cf:14:38:96:2f:23:ab:64:
af:90:1d:de:3d:f3:4f:a2:5d:55:1f:b5:55:99:ad:21:89:3d:
74:61:31:39:a3:f1:17:a3:f2:59:9b:20:30:2b:c8:54:7c:4a:
8c:f1:c2:c8:50:13:e8:14:fd:58:be:15:3d:ba:70:a3:cd:e0:
02:f2:a9:25:fa:9f:28:a3:97:f1:52:f0:08:d0:4e:3c:bd:d1:
1d:0a:a6:4f:0c:f6:46:c2:5d:b9:88:17:c4:64:42:01:99:8a:
d2:f5:97:10:36:d6:85:70:08:f5:c9:41:bb:fd:3f:b0:06:cb:
d9:55:93:45:d2:81:24:98:96:aa:db:e6:a4:50:aa:f9:d7:d4:
fe:1a:65:39:d5:8d:37:5e:a2:72:a3:43:53:56:49:e6:3e:7f:
d3:9b:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:55 2025 by rpki-client